$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: kfY98TzaAGHi3yIFxzjb/1nCZ42MC+fm/uouYP3ITa4= Subject key identifier: 34:F4:B1:41:75:DE:DA:3F:80:B8:AD:46:57:F6:0C:8B:BD:41:09:C5 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 497C3D9261D4E725DC7CF1FE0FE1A5DD7C178039 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: D7 Signing time: Fri 22 Aug 2025 07:52:09 +0000 Manifest this update: Fri 22 Aug 2025 07:47:09 +0000 Manifest next update: Mon 25 Aug 2025 16:15:09 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 4: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: Ii8WWywa/pPt/wdTWomYJ2Q+m/H8GeYC3L2UaytSnoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7c:3d:92:61:d4:e7:25:dc:7c:f1:fe:0f:e1:a5:dd:7c:17:80:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Aug 22 07:47:09 2025 GMT Not After : Aug 25 16:15:09 2025 GMT Subject: CN=34F4B14175DEDA3F80B8AD4657F60C8BBD4109C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:d6:5e:92:4e:fd:e8:b7:1a:18:af:43:95: c4:07:5a:37:f4:b8:d7:a3:ac:49:b9:0b:a2:b5:f6: db:87:55:28:bf:c2:49:05:4f:0f:bd:74:72:b5:06: b9:e1:4c:d7:7d:b8:1f:8f:f2:8e:09:6c:f1:6c:70: 9c:52:d2:e9:fd:19:8f:6f:77:4e:11:a7:5c:46:8a: 04:a7:26:03:04:05:f4:b8:f8:9b:49:3b:8b:cb:80: 29:10:4e:d4:95:6e:f5:52:fe:6e:59:57:8d:c1:c7: 99:24:33:b4:cc:87:de:c8:5c:85:87:d3:58:da:f0: 75:8c:b5:98:1b:72:ae:3b:85:20:0e:bc:8c:74:c2: 60:b2:c2:1d:28:e7:05:cd:1f:5b:06:2b:92:3a:d7: 4a:88:3a:43:09:d8:40:fd:68:47:f2:00:62:57:71: ef:da:83:25:ca:ee:8c:61:85:3a:7a:ea:a0:1c:e9: 0b:e5:4d:4d:87:d2:2e:c4:32:40:56:f8:2c:ea:ab: 61:bc:a5:6a:a5:99:4a:c7:f7:79:5a:04:f6:05:6c: a3:0c:7c:84:f8:54:68:04:93:c2:52:33:2e:c7:29: 18:c2:fb:20:8a:92:b2:98:ad:78:f3:21:28:04:3a: 9c:56:e3:af:1e:cb:fb:85:6b:ce:5d:67:77:13:3d: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:B1:41:75:DE:DA:3F:80:B8:AD:46:57:F6:0C:8B:BD:41:09:C5 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:41:ec:c4:41:92:b3:b0:9e:67:73:a3:81:b3:6b:a9:4b:7e: 43:99:b8:ae:d4:d7:5a:c0:a2:73:4a:d3:04:d6:b6:36:3a:0c: 4b:22:65:4b:26:81:69:62:82:ae:c2:d4:d2:f0:35:3b:ac:5f: 72:73:8e:58:81:58:69:dc:be:27:65:6f:75:d5:00:55:eb:ff: 08:f6:13:f4:8e:26:dc:97:19:d9:1e:bb:74:00:04:99:e8:40: 54:69:a7:3a:d6:99:57:4a:79:7f:b5:1b:60:bc:63:a6:7c:98: 4b:11:08:06:7c:d0:53:48:a5:b4:50:64:54:8a:a5:84:04:fe: b6:50:8e:a0:1e:c1:b0:f1:07:9b:0a:c6:73:cf:55:94:9a:fd: 16:ab:be:22:da:fa:52:82:d2:79:1d:b9:86:2a:12:28:8b:04: 18:cb:cb:b5:af:e4:09:1a:a5:73:73:93:a9:a3:83:c5:f3:01: 6a:82:1f:37:72:90:07:97:f9:4d:f8:f1:93:f3:4c:ef:f8:c5: 23:88:36:0d:e1:a4:f3:cf:53:c8:c7:fe:b9:84:3f:93:2a:6e: e5:15:c2:b3:3e:92:97:a4:b1:8b:78:9d:75:6d:90:63:3a:99: dd:34:cc:8a:6b:33:00:7f:52:a5:a9:6f:ed:7c:a2:04:36:40: 0d:27:0d:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXw9kmHU5yXcfPH+D+Gl3XwXgDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTA4MjIwNzQ3MDlaFw0yNTA4MjUxNjE1MDlaMDMxMTAvBgNV BAMTKDM0RjRCMTQxNzVERURBM0Y4MEI4QUQ0NjU3RjYwQzhCQkQ0MTA5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCdZekk796LcaGK9DlcQHWjf0 uNejrEm5C6K19tuHVSi/wkkFTw+9dHK1BrnhTNd9uB+P8o4JbPFscJxS0un9GY9v d04Rp1xGigSnJgMEBfS4+JtJO4vLgCkQTtSVbvVS/m5ZV43Bx5kkM7TMh97IXIWH 01ja8HWMtZgbcq47hSAOvIx0wmCywh0o5wXNH1sGK5I610qIOkMJ2ED9aEfyAGJX ce/agyXK7oxhhTp66qAc6QvlTU2H0i7EMkBW+Czqq2G8pWqlmUrH93laBPYFbKMM fIT4VGgEk8JSMy7HKRjC+yCKkrKYrXjzISgEOpxW468ey/uFa85dZ3cTPcktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNPSxQXXe2j+AuK1GV/YMi71BCcUwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9B7MRBkrOwnmdzo4Gza6lLfkOZuK7U11rA onNK0wTWtjY6DEsiZUsmgWligq7C1NLwNTusX3JzjliBWGncvidlb3XVAFXr/wj2 E/SOJtyXGdkeu3QABJnoQFRppzrWmVdKeX+1G2C8Y6Z8mEsRCAZ80FNIpbRQZFSK pYQE/rZQjqAewbDxB5sKxnPPVZSa/RarviLa+lKC0nkduYYqEiiLBBjLy7Wv5Aka pXNzk6mjg8XzAWqCHzdykAeX+U348ZPzTO/4xSOINg3hpPPPU8jH/rmEP5MqbuUV wrM+kpeksYt4nXVtkGM6md00zIprMwB/UqWpb+18ogQ2QA0nDVY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:47:18 2025 by rpki-client